Michal Zalewski, The Tangled Web: A Guide to Securing Modern Web Applications

Top ten for 2015: Browder, Chernow, Coleman, Ronson (Shamed), Schneier, Phillips, Nisbett, Ortega, Miller and Shales, Thaler. I bought and read Bardin's book because Richard Bejtlich identified it as a "train wreck," and it was.